[arch-general] QEMU and the spicec client
The QEMU page on the wiki [1] has a section on the "spice" support in the qemu package [2], which also mentions the "spicec" client program. As far as I remember, it has been part of the qemu package, but now it seems to be gone and even pkgfile can't find it. Does anybody know what happened? [1] https://wiki.archlinux.org/index.php/QEMU#Spice_support [2] https://www.archlinux.org/packages/extra/x86_64/qemu/ -- jlk signature.asc Description: PGP signature
Re: [arch-general] QEMU and the spicec client
On 03.12.15 at 17:42, Jakub Klinkovský wrote: > On 03.12.15 at 21:53, Al Kenn wrote: > > On Thu, Dec 03, 2015 at 11:24:33AM +0100, Jakub Klinkovský wrote: > > > The QEMU page on the wiki [1] has a section on the "spice" support in the > > > qemu > > > package [2], which also mentions the "spicec" client program. As far as I > > > remember, it has been part of the qemu package, but now it seems to be > > > gone and > > > even pkgfile can't find it. Does anybody know what happened? > > > > package: spice-gtk3 > > command: spicy > > > > as recommended by http://www.spice-space.org/download.html > > > > I'm aware of the GTK-3 client, but is "spicec" really gone and why? > > -- > jlk Oh well, I seem to have found it: http://cgit.freedesktop.org/spice/spice/tree/NEWS?id=f0aeb9db000a34a46b51c5d95229171ff1eee307#n3 -- jlk signature.asc Description: PGP signature
Re: [arch-general] QEMU and the spicec client
On 03.12.15 at 21:53, Al Kenn wrote: > On Thu, Dec 03, 2015 at 11:24:33AM +0100, Jakub Klinkovský wrote: > > The QEMU page on the wiki [1] has a section on the "spice" support in the > > qemu > > package [2], which also mentions the "spicec" client program. As far as I > > remember, it has been part of the qemu package, but now it seems to be gone > > and > > even pkgfile can't find it. Does anybody know what happened? > > package: spice-gtk3 > command: spicy > > as recommended by http://www.spice-space.org/download.html > I'm aware of the GTK-3 client, but is "spicec" really gone and why? -- jlk signature.asc Description: PGP signature
Re: [arch-general] PKGBUILD: replaces array in split packages
On 13.02.15 at 19:40, Troy Engel wrote: On Fri, Feb 13, 2015 at 5:21 PM, Jakub Klinkovský j@gmx.com wrote: Or at least I thought so - it appears that both qemu and libcacard have qemu-kvm in their 'replaces' array. In this case, it's because qemu is a split package (qemu + libcacard) and the replaces array is defined globally in the PKGBUILD, not per-package. I am not familiar with qemu, however it appears to be a packaging bug in qemu. The qemu package does not depend on libcacard, and libcacard does not depend on qemu; based on the readme[1] it sure looks like this just happens to be another library developed by the same team which can be used with qemu for added features. Looking at the qemu PKGBUILD, it seems like that replaces('qemu-kvm') belongs in package_qemu() and not in the global definition. The replaces() was added in the commit going from 1.2.x to 1.3.x when the package was not split: https://projects.archlinux.org/svntogit/packages.git/commit/trunk?h=packages/qemuid=273924889b2563215778521747e0f0eb2e98c038 Then, the package was split going from 1.5.1 to 1.5.2 here: https://projects.archlinux.org/svntogit/packages.git/commit/trunk?h=packages/qemuid=3758dddfe4a14cbd6cb5b6ed6ccd0640d169046c I am thinking the replaces() array was missed when the split was created and is a bug that you should report. Thanks, I've reported the bug for qemu: https://bugs.archlinux.org/task/43814 As a side note, qemu in fact depends on libcacard, but libcacard alone does not replace qemu-kvm. I've also tested what pacman would do in this situation with a dummy package, and it prompts for all packages replacing qemu-kvm: :: Starting full system upgrade... :: Replace qemu-kvm with extra/libcacard? [Y/n] :: Replace qemu-kvm with extra/qemu? [Y/n] Answering Yes and then No would lead to only libcacard being installed. So I guess it is theoretically possible to have multiple packages replacing the same package, but these situations are probably unwanted. -- Jakub Klinkovský (Lahwaacz) pgp0p0kVHKQK4.pgp Description: PGP signature
[arch-general] PKGBUILD: replaces array in split packages
Hello, I'm writing a script [1] to update package links on ArchWiki. The script also gives hints on broken/outdated package, e.g. for 'mesa-dri` the hint is replaced by 'mesa' (with an appropriate link to the 'mesa' package). I've chosen to only look into the 'replaces' array of the packages, because unlike 'provides', a package can be replaced only by one other package, whereas multiple packages can provide the same package. Or at least I thought so - it appears that both qemu and libcacard have qemu-kvm in their 'replaces' array. In this case, it's because qemu is a split package (qemu + libcacard) and the replaces array is defined globally in the PKGBUILD, not per-package. Is this a bug or was my assumption about the 'replaces' array wrong? How would pacman handle the situation where qemu-kvm is supposed to be replaced by libcacard and/or qemu? Thanks for answers, Jakub Klinkovský (Lahwaacz) [1]: https://github.com/lahwaacz/wiki-scripts/blob/master/update-package-templates.py pgp_pibFI6btH.pgp Description: PGP signature
Re: [arch-general] Christmas wiki cleanup
On 26.12.14 at 15:43, mrlemux wrote: The scan for the German wiki is missing That's because the German wiki is an external wiki, running on different domain and server, and thus completely separated from the main ArchWiki. Many languages have pages on ArchWiki, but others are separated similarly to the German wiki. See [1] for details. [1]: https://wiki.archlinux.org/index.php/Help:I18n#Languages -- Jakub Klinkovský (Lahwaacz) pgp6xUiZKjoZE.pgp Description: PGP signature
[arch-general] Christmas wiki cleanup
Hello all, after several months there is another round of cleanup action on the wiki. The subject is, as it was the last time, updating links to packages in official repositories or in the AUR, which got broken due to package merges, renames or removals. A bot has done part of the work, but there are still many broken links requiring intervention of humans. Everybody is hereby invited to join our cleanup party, because the more people involved, the sooner the work is finished :) The party will be held at [1], which is a generated list of broken links, split into sections by language and page where it occurred. Basically, after the link is fixed on the relevant page, it should be stricken in the list, in order to not waste time of others going through the list. More detailed instructions are given at the top of the list. See you at the party! [1]: https://wiki.archlinux.org/index.php/User:Lahwaacz.bot/Report_2014-12-24 -- Jakub Klinkovský (Lahwaacz) pgpLYeWaxOdhP.pgp Description: PGP signature
Re: [arch-general] fdisk vs. gdisk for GPT partitioning
On 16.12.14 at 20:15, Bardur Arantsson wrote: On 2014-12-16 19:58, Sebastiaan Lokhorst wrote: Hello everyone, Since more than a year now, fdisk (provided by util-linux) has had GPT support. This theoretically makes gdisk a duplicate of fdisk, and we could replace gdisk with fdisk. Now, I'm not asking to drop gdisk or anything like that, but in an effort to clean up the Beginners' guide of the Arch Wiki, we want to use a single partitioning tool for both MBR and GPT partitioning instructions.[1] util-linux fdisk is able to provide this functionality, but we are not completely sure if it is stable by now (it should be, I think). Speaking from complete ignorance... do significant numbers of people still use MBR for non-obsolete platforms/machines? The Beginners' guide still applies to people with obsolete hardware... -- jlk pgpeLGPk1ybJ9.pgp Description: PGP signature
Re: [arch-general] Location of the pacman database
On 15.09.14 at 16:42, Leonid Isaev wrote: In the general case 'pristine' is probably the settings shipped by the various arch linux packages. But those do not usually provide sane defaults, e.g. smartd.conf, dnsmasq.conf, syslog-ng.conf, wpa_supplicant.conf, and must be edited anyway. There is a difference between example documentation config and default config, see one of my previous posts: https://mailman.archlinux.org/pipermail/arch-general/2014-May/036386.html pgp59Gn9Lqhjr.pgp Description: PGP signature
Re: [arch-general] Check for update in script
On 11.09.14 at 19:01, Yamakaky wrote: Hi I can't find a good way to check for available upgrades without touching the database, as running `pacman -Sy` without `u` isn't supported. Any idea ? Maybe a new pacman switch like --upstreamdbpath to toggle change the location of sync/ without touching local/ ? Why I need it : https://github.com/XavierBerger/RPi-Monitor/pull/57#issuecomment-55248969 Yamakaky pacman provides a `checkupdates` script, see /usr/bin/checkupdates for how it works. -- jlk pgpmDUdmL4ExP.pgp Description: PGP signature
Re: [arch-general] (no subject)
On 07.09.14 at 12:37, Eugenio M. Vigo wrote: 2014-09-07 12:28 GMT+02:00 Ralf Mardorf ralf.mard...@rocketmail.com: The package likely moved from AUR to an official repository and for some reason another version is used. grep kdeedu-kig /var/log/pacman.log and assumed you used yaourt, there likely would be a line [date] [PACMAN] Running 'pacman --color auto -U --asdeps /tmp/yaourt-tmp-* Or you build a package on your own, before there was a version available by an Arch repository and you don't remember that you did it. Yu build something from git and the repository uses the official release from upstream. Usually the difference isn't a release version, as it is in your case, but just a -2 vs -1 package version of the same release. That package was never installed from AUR. This is the output from grep kdeedu-kig /var/log/pacman.log: [ugi@UGI ~]$ grep kdeedu-kig /var/log/pacman.log [2014-03-14 21:21] [PACMAN] installed kdeedu-kig (4.12.3-1) [2014-04-01 12:01] [PACMAN] upgraded kdeedu-kig (4.12.3-1 - 4.12.4-1) [2014-04-19 10:31] [PACMAN] upgraded kdeedu-kig (4.12.4-1 - 4.13.0-1) [2014-05-20 10:17] [PACMAN] upgraded kdeedu-kig (4.13.0-1 - 4.13.1-1) [2014-06-11 14:53] [PACMAN] upgraded kdeedu-kig (4.13.1-1 - 4.13.2-1) [2014-07-23 01:57] [PACMAN] upgraded kdeedu-kig (4.13.2-1 - 4.13.3-1) [2014-08-21 11:17] [PACMAN] upgraded kdeedu-kig (4.13.3-1 - 4.14.0-1) I thought it could be a mirror thing, but I see that at the Database (https://www.archlinux.org/packages/extra/x86_64/kdeedu-kig/) the package is said to be at version 4.13.3-2 (and this change does not show up on the git commits). Eu. On the page you just linked, the Build Date is 2014-08-13 07:45 UTC, while the Last Updated date is 2014-09-07 08:32 UTC. The git log [1] shows the bump to 4.14, but not (yet?) back to 4.13 so there is definitely something going on... [1]: https://projects.archlinux.org/svntogit/packages.git/log/trunk?h=packages/kdeedu-kig -- jlk pgpcF3w3WCUZt.pgp Description: PGP signature
Re: [arch-general] Btrfs blues - lack of space
On 30.08.14 at 23:09, Savyasachee Jha wrote: Hello, all The contents of my /etc/fstab are as follows: /dev/sda3 / btrfs rw,relatime,space_cache,autodefrag0 0 /dev/sda1 /boot ext2 rw,relatime0 2 /dev/sda5 /home btrfs rw,relatime,space_cache,autodefrag0 0 Whenever I start my laptop up, /home takes ~17-19 seconds to mount, as is evidenced by this line in the output of systemd-analyze blame: 16.467s home.mount Running df -h on my system, I get: Filesystem TotalUsed Free Use% Mounted on /dev/sda5 422G 364G 53G 88%/home However, running du -h --summarize /home, I get: 318G /home If I use xdiskusage to see the partition, it shows 46.48G as /home/(permission denied). I tried doing this using sudo, and I still have the same problem. I have neither subvolumes nor any snapshots on this volume. Is there any way of recovering this space? Thank you, Savya -- Savyasachee Jha *Aerodynamics is for people whodon't know how to build engines.* Use: $ btrfs filesystem df /home pgpmv7RArezMG.pgp Description: PGP signature
Re: [arch-general] Btrfs blues - lack of space
On 30.08.14 at 21:58, Temlin Olivér wrote: Whenever I start my laptop up, /home takes ~17-19 seconds to mount You can always use x-systemd.automount in fstab, which delays the mount to the first access (ie. non-root login), or mask home.mount to be non-blocking (oneshot), so it runs parallel with the login manager and password input. Slow mount times are usually caused by large log trees and fragmented metadata. Try the autodefrag mount option and btrfs fi defrag -clzo -t 2M -r /home (defragment files over 2M in size, recompress with lzo, recursively), btrfs balance start /home (and wait for btrfs-endio-wri to calm down or check with balance status, this takes some time) If those don't help enough, try checking (but not repairing) the device with btrfsck, and, if it's clean, clear the logs with btrfs-zero-image after backing up the metadata with btrfs-image (consult the btrfs mailing list or IRC first, I am not an expert in this). Running df -h on my system, I get: /dev/sda5 422G 364G 53G 88%/home Please use btrfs filesystem df (fi df for short), as it will show you both the data and metadata allocation with better reflection on actual free data space. Point is, the allocation on B* trees can only be measured by a full tree traversal (as your du try shows the true data usage, but misses fragmentation), but btrfs usage is even more complicated. Authors suggest that a device never be filled over 75% to avoid metadata fragmentation, but by having larger files this can truly be about 95%. Sorry for the long text, but I belive this helps in better understanding. --Oliver Temlin Also note that `du` does not account for Copy-on-Write, so it could actually show higher value than what `btrfs fi df` reports. pgpFpqWrocpot.pgp Description: PGP signature
Re: [arch-general] POWER_SUPPLY_CHARGE_FULL(_DESIGN) semantics
On 15.08.14 at 12:27, Chrisitan Burkard wrote: ... Another issue I have is that the POWER_SUPPLY_STATUS shows 'Unknown' on AC but 'Discharging' on Battery. Do you have any idea why? My guess is that i3 uses this property to show the battery/AC state in i3status and because of the 'Unkown' value I don't get updates on the state there. The values for POWER_SUPPLY_STATUS on my laptop are: - when running on battery, it is always 'Discharging' - when running on AC: - 'Full' for 100% - 'Unknown' for 95%-99% - 'Charging' for 95% Note that my battery is not getting charged if the level is between 95% and 99% when I plug in AC. -- jlk pgpAJ07ZhvDkC.pgp Description: PGP signature
Re: [arch-general] 3.15 kernel breaking X ?
On 07.07.14 at 11:21, Daniel Petre wrote: On 07/07/14 07:25, Achilleas Pipinellis wrote: On 07/06/2014 09:17 PM, Daniel Petre wrote: Hey there, i just installed Arch on a x61s thinkpad using xf86-video-intel of course but it seems Cinnamon starts and gives a black unresponsive screen while booting and trying on linux-lts works absolutely fine.. Anyone has any idea ? Thanks! Intel you say? Check this bug https://bugs.archlinux.org/task/40899 Basically, stick with a 3.14 kernel for the moment. Apologies but i do not know how to reinstall the 3.14 kernel, linux is 3.15 and linux-lts is 3.10.. Can i get from some repo the 3.14 package? Thanks. https://wiki.archlinux.org/index.php/Downgrading_packages -- jlk pgp8pEWcClm89.pgp Description: PGP signature
Re: [arch-general] Qemu - File sharing using Samba
On 07.07.14 at 16:40, Csányi Pál wrote: Hi Guus, 2014-07-06 22:37 GMT+02:00 Guus Snijders gsnijd...@gmail.com: Op 6 jul. 2014 20:08 schreef Csányi Pál csanyi...@gmail.com het volgende: 2014-07-06 16:50 GMT+02:00 Jakub Klinkovský j@gmx.com: On 06.07.14 at 16:14, Csányi Pál wrote: [...] OK, I red that and now I'm starting my VM with the command: qemu-system-x86_64 -net nic -net user,smb=/mnt/windows7 -cpu core2duo -m 1024 -k hu -enable-kvm -usbdevice tablet /var/lib/libvirt/images/win7.qcow2 Still, when I'm trying to acess the \\10.0.2.4\qemu in Windows explorer, I get nothing. The error message is about that that the server is not responding, saying something about time.. Can you ping that ip adress from Windows? I can't ping 10.0.2.4 IP address from Windows. I don't think ping will ever work for user networking, this should be fine. Second: do you have filesharing enabled in the Windows vm (and instructed the firewall to allow that)? I think I have filesharing enabled in the Windows vm (and instructed the firewall to allow that) because I did setup on Windows vm this by following these steps: http://swerdna.dyndns.org/susesambawin7.html I can't access that url. Still, I'm not sure in that that what did I on Windows vm, because: 1. the \\10.0.2.4\qemu directory is on the host GNU/Linux system, right, 2. the directory I shared on the Windows vm is a directory on that Windows vm system so these two settings is for different things, right? That's right, for 1. you're fine with user networking (-net user,smb=...), but for 2. you will need something better to be able to access the guest system from the host. See the subsections of QEMU#Networking [1] on the wiki. [1]: https://wiki.archlinux.org/index.php/QEMU#Networking -- Regards from Pal -- jlk pgpnq2mgqt9UT.pgp Description: PGP signature
Re: [arch-general] Can't SSH into Arch VM until login screen is viewed
On 07.07.14 at 9:59, Ben Booth wrote: I have a weird issue I’m trying to figure out with Arch and SystemD, and I wonder if anyone here has run into this issue: I’m running ArchLinux as a Xen VM. Every time I reboot the system, I can no longer ping it or access it via SSH. However, if I go into the XenCenter UI and click the “Console” tab to view the VM’s login screen, all of a sudden SSH and ping works again. It’s as if systemd is waiting for the login screen to be viewed before it allows SSH to work. Is this some kind of systemd socket-activated functionality related to the getty service? How can I prevent this so that I can log in via SSH after reboot without having to run the XenCenter UI? Thanks, Ben Booth If even the ping does not work, it sounds more like an issue with firewall to me. I have no idea if xen modifies the firewall, check its state before and after running xen and compare the differences. -- jlk pgpeZ9uZUxjlx.pgp Description: PGP signature
Re: [arch-general] Qemu - File sharing using Samba
On 06.07.14 at 16:14, Csányi Pál wrote: Hi, I'm trying to get access to files on my ArchLinux host from my Qemu emulated Windows7 guest. I have installed samba on ArchLinux host system; I start it with: # systemctl start smbd.service I started the guest Windows7 system with: $ qemu-system-x86_64 -smb /home/cspal -cpu core2duo -m 1024 -k hu -enable-kvm -usbdevice tablet /var/lib/libvirt/images/win7.qcow2 When in Windows7 guest system, either in Firefox browser or in Windows Explorer, I can't connect to \\10.0.2.4 What am I missing here? -- Regards from Pal QEMU has built-in SMB server, you shouldn't start it on your own for this. See the wiki for details: https://wiki.archlinux.org/index.php/QEMU#QEMU.27s_built-in_SMB_server Also, according to qemu(1), the -smb option is deprecated. -- jlk pgpg6m4ttAKDt.pgp Description: PGP signature
[arch-general] Packaging: difference between example documentation config and default config
Hi all, there are two kinds of config files shipped with Arch packages: 1) example documentation config - by this I mean sample config files, intended for documentation purposes 2) default config - by this I mean configs containing sensible default values uncommented to provide basic functionality ootb One of the recognition signs is that in Arch, 2) configs are usually very short. Some examples of proper default configs: /etc/ntp.conf /etc/pacman.conf and of example documentation configs: /etc/dnsmasq.conf /etc/wpa_supplicant/wpa_supplicant.conf /etc/hostapd/* /usr/share/doc/lighttpd/config/* Now the problem is: should example documentation configs be installed in /etc/ or /usr/share/doc/package/ ? I'd vote for the latter, here is the reasoning: 1) Users will hardly overwrite files in /usr/share/doc/ so keeping example documentation configs there will ease maintenance of short and much clearer separate config files. 2) In the examples above, in all dnsmasq, wpa_supplicant and hostapd, the decision to keep the configs under /etc/ is made in PKGBUILD [1], [2], [3]. In case of wpa_supplicant, wpa_supplicant.conf(5) even indicates that the path to example config is probably /usr/share/doc/wpa_supplicant/. 3) Keeping example documentation configs with uncommented options under /etc/ might lead to unintended behaviour, meaning the default options might not be very sane. Specifically, /etc/wpa_supplicant/wpa_supplicant.conf has multiple network blocks uncommented, which, in conjunction with the recently introduced dhcpcd hook [4], may lead to wpa_supplicant being started without user's intervention and not failing due to the network blocks uncommented in wpa_supplicant.conf. 4) Considering the user-centric clause in the Arch Way [5], I don't think any default config file for the three packages is necessary as anybody using it will have to modify it. Creating the file instead of modifying some bloated sample should be easier, see point 1). Before I submit bug reports for the three packages (dnsmasq, wpa_supplicant, hostapd), I'd like to hear some more opinions about this. Thanks, -- jlk [1]: https://projects.archlinux.org/svntogit/packages.git/tree/trunk/PKGBUILD?h=packages/dnsmasq#n37 [2]: https://projects.archlinux.org/svntogit/packages.git/tree/trunk/PKGBUILD?h=packages/wpa_supplicant#n42 [3]: https://projects.archlinux.org/svntogit/community.git/tree/trunk/PKGBUILD?h=packages/hostapd#n55 [4]: https://wiki.archlinux.org/index.php/Dhcpcd#10-wpa_supplicant [5]: https://wiki.archlinux.org/index.php/The_Arch_Way#User-centric pgpgbIfJDehwd.pgp Description: PGP signature
Re: [arch-general] Optimizing boot
On 30 April 2014 00:06:43 CEST, Toyam Cox csupercomputerg...@gmail.com wrote: Hello, I want to have a sub-30 second boot time, so as to make it possible for me to power down my computer and power back up at a moment's notice. Right now, I have a (according to my watch) ~35 second boot time. I used systemd-analyze, and discovered that NetworkManager.service is running for 12 seconds of that time! Also, polkit.service runs quite a while after everything else, but that is less important. How do I optimize NetworkManager.service to shorten boot times, especially as I don't need a network first-thing? -- - Toyam Just a wild guess: https://bbs.archlinux.org/viewtopic.php?id=180099
[arch-general] [wiki cleanup] Links to non-existent packages
Hello all, as of today, there are exactly 714 invalid uses (413 unique) of Template:AUR [1] or Template:Pkg [2] on the wiki, spread across 398 pages. The complete list is on [3]. I will try to go through it and update the links, but this is not a one-man job, so I would really appreciate some help. Please remember to strike/remove the items from the list to save others' time. The list includes some trivial mistakes (e.g. using package name with version), but in most cases it will involve updating other content of the page. Also it may be possible that there is a direct replacement for some packages (e.g. the result of merging/renaming). [1]: https://wiki.archlinux.org/index.php/Template:AUR [2]: https://wiki.archlinux.org/index.php/Template:Pkg [3]: https://wiki.archlinux.org/index.php/User:Lahwaacz.bot/Report_2014-04-05 Regards, -- jlk pgpLMIE5pEJoT.pgp Description: PGP signature
Re: [arch-general] Printable wiki pages not working
On 30.03.14 at 0:37, Karol Blazewicz wrote: On Sat, Mar 29, 2014 at 4:23 PM, Jerome Leclanche adys...@gmail.com wrote: ?printable=yes on the wiki doesn't seem to have any effect. https://bugs.archlinux.org/task/30825 Actually, it's because print.css [1] does only one thing: hides the permalink. I'm puzzled as to what does the it is working at the moment in the bug report mean... Alternatively, the stylesheet could be configured at [2], but only admins can edit the MediaWiki namespace. There seems to be a draft [3], but it is placed in the wrong namespace. [1]: https://projects.archlinux.org/vhosts/wiki.archlinux.org.git/tree/skins/archlinux/print.css [2]: https://wiki.archlinux.org/index.php/MediaWiki:Print.css [3]: https://wiki.archlinux.org/index.php/ArchWiki:Print.css -- jlk pgpg1r0SMRL4T.pgp Description: PGP signature
Re: [arch-general] browser and tty
On 25.03.14 at 13:26, Mark Lee wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 03/25/2014 01:23 PM, Jason Plum wrote: Verify there is no running instance of Chromium in any other session, as it spawns children withing its original session. I have seen this happen with X2go as well. Jason Plum WarheadsSE On Tue, Mar 25, 2014 at 1:18 PM, arnaud gaboury arnaud.gabo...@gmail.comwrote: Dear list, I decided to get rid of my mate DE and go i3. Before I am testing my settings on tty2 (Ctrl+Alt+F2) with a modify .xinitrc (exec i3). I have a weird behavior as regarding my web browser, could it be chromium or firefox. On my i3 config. I have this line: assign [instance=^chromium$] → 1 Unfortunately, when I log in on tty2, there is no chromium being started. When I am back on tty1 (mate session), I find chromium being opened. Then, on tty2, if I start manually firefox, I can't as I am told firefox is already running. Indeed it is but on tty1. It seems like web browsers are attached to my tty1. Is there any reason for this behavior? Shall I modify anything to start any web browser on tty2 ? Thank you for help. Salutations, According to the Arch Wiki : https://wiki.archlinux.org/index.php/I3#Launching_programs_on_specific_workspaces; that seems to be the correct behavior. You are assigning chromium to be launched on tty1. Regards, Mark i3 workspace is *not* tty! See http://i3wm.org/docs/userguide.html#_using_workspaces pgpouMDJeHwLl.pgp Description: PGP signature
Re: [arch-general] browser and tty
On 25.03.14 at 18:18, arnaud gaboury wrote: Dear list, I decided to get rid of my mate DE and go i3. Before I am testing my settings on tty2 (Ctrl+Alt+F2) with a modify .xinitrc (exec i3). I have a weird behavior as regarding my web browser, could it be chromium or firefox. On my i3 config. I have this line: assign [instance=^chromium$] → 1 Unfortunately, when I log in on tty2, there is no chromium being started. When I am back on tty1 (mate session), I find chromium being opened. Then, on tty2, if I start manually firefox, I can't as I am told firefox is already running. Indeed it is but on tty1. It seems like web browsers are attached to my tty1. Is there any reason for this behavior? Shall I modify anything to start any web browser on tty2 ? Thank you for help. AFAIK, systemd does not (yet) support multi-session correctly - but this is mostly irrelevant, unless you want to use dbus. Anyway, I don't think this is supported at all - what would be the expected behaviour when you run the same browser profile on both tty1 and tty2 ? What would happen when file conflict arises (same profile means both instances use the same directory for data)? -- jlk pgpzXarCzTCid.pgp Description: PGP signature
Re: [arch-general] browser and tty
On 25.03.14 at 18:56, arnaud gaboury wrote: i3 workspace is *not* tty! See http://i3wm.org/docs/userguide.html#_using_workspaces No ?? really? Are you joking ? I'm certain. i3 workspaces are an implementation of virtual desktop [1], as Wikipedia calls it. I'm quite sure that MATE has its own implementation, but it is likely very different from i3's. On the other hand, ttys are virtual consoles [2], which is similar concept, but on lower level. The general rule is that one X server cannot span multiple ttys. [1]: https://en.wikipedia.org/wiki/Virtual_desktop [2]: https://en.wikipedia.org/wiki/Virtual_console -- jlk pgps59foGkbgO.pgp Description: PGP signature
Re: [arch-general] browser and tty
On 25.03.14 at 19:02, arnaud gaboury wrote: According to the Arch Wiki : https://wiki.archlinux.org/index.php/I3#Launching_programs_on_specific_workspaces; that seems to be the correct behavior. You are assigning chromium to be launched on tty1. No, I am assigning chromium to be launched on WORKSPACE 1 !! I apologize I just caught the error myself as your email came in. Does i3 require xorg-xserver, and if that's the case, is there already a running instance of the xserver on TTY1(you mention you have mate). Even if I boot directly into i3 in tty1, chromium is not started on workspace 1. The 'assign' directive will not start Chromium, you would need to combine it with 'exec'. Or have I misunderstood again? Furthermore, my keyboard is US, not the one I use. Part of my /etc/X11/xorg.conf Section InputDevice Identifier Keyboard0 Driverkbd Option XkbLayout ch Option XkbModel pc104 Option XkbVariant fr EndSection All my issues seem tied to a xserver issue in fact. Is it /etc/X11/xorg.conf or some file in /etc/X11/xorg.conf.d/ ? This is a long shot, but there might be a difference... pgpti6OspH4A9.pgp Description: PGP signature
Re: [arch-general] browser and tty
On 25.03.14 at 19:17, arnaud gaboury wrote: On Tue, Mar 25, 2014 at 7:09 PM, Jakub Klinkovský j@gmx.com wrote: On 25.03.14 at 18:56, arnaud gaboury wrote: i3 workspace is *not* tty! See http://i3wm.org/docs/userguide.html#_using_workspaces No ?? really? Are you joking ? I'm certain. i3 workspaces are an implementation of virtual desktop [1], as It seems that we don-t have same kind of joke. I know tty is not i3 workspace. Apologies. On the other hand, my post must have been really funny for you :) After a reboot, now I boot directly into i3. Fine, chromium is running . But my keyboard is still wrong. Any suggestion See the other post, and please keep try to keep the problem solving linear (as in linear graph), don't switch branches if possible. pgp4Rqz5I3MIE.pgp Description: PGP signature
Re: [arch-general] browser and tty
On 25.03.14 at 23:35, arnaud gaboury wrote: As for firefox, these two lines starts firefox, BUT in workspace 2, as indicated in the i3 bar. exec firefox-aurora assign [instance=^firefox-aurora$] 1 exec --no-startup-id i3-msg 'workspace 1; exec firefox-aurora' did the trick Actually, looking at the above lines now, you should first 'assign' and then 'exec', which should be the last thing defined in the config. -- jlk pgpkdpfmpM04B.pgp Description: PGP signature
Re: [arch-general] graphical display management
On 24.03.14 at 21:08, message wrote: On 2014-03-23 18:13, arch-general-requ...@archlinux.org wrote: -- Message: 5 Date: Thu, 20 Mar 2014 19:06:12 -0400 From: Mark Lee m...@markelee.com Subject: Re: [arch-general] graphical display management On 03/20/2014 06:50 PM, Guus Snijders wrote: Op 20 mrt. 2014 18:36 schreef message let...@openmailbox.org het volgende: [ gdm ] After power-on, the computer starts with a sign-in prompt. Normal user does not work. Signed in as root [...] Ok, now we're getting somewhere. When the logon as user does not work, do you get an error message? error: 'login incorrect'. As root, enter the command 'su a' and not prompted for a password. 'less /etc/shadow' shows the password for the user. Interestingly, 'su a' results in the cursor 'pwd' to be the root home directory and not '/home/a'. This is the expected behaviour. Just run the command 'cd', without arguments it will get you into the home directory, which should be '/home/a'. Or run 'su -l a'. Do you have the correct graphics drivers installed (xf86-video-*)? At least xf86-video-vesa should work. See https://wiki.archlinux.org/index.php/Xorg#Driver_installation Yes, according to the successful initiation of an x session when signed in as root and the driver installation test instructions. pgpKrFbik9G_Z.pgp Description: PGP signature
Re: [arch-general] user management error
On 17.03.14 at 18:25, message wrote: Readers, A previously existing /home directory was mounted into the file system during the installation process; this directory contained files in a directory 'a'. A user was created from the root user account: useradd -M -p [password] -s /bin/bash [username'a'] After reboot, the system is restarted as root because the user 'a' is stated to not exist. The command 'cat /etc/passwd' reveals a password 'x', but this is not the password that was entered. How to solve this error? From passwd(5): If the password field is a lower-case “x”, then the encrypted password is actually stored in the shadow(5) file instead. So look into /etc/shadow if you are looking for the password. pgppdnrFmyNLB.pgp Description: PGP signature
Re: [arch-general] tap device
On 10.03.14 at 23:30, Damjan Georgievski wrote: 3: tap0: NO-CARRIER,BROADCAST,MULTICAST,PROMISC,UP mtu 1500 qdisc ... I do not understand why the tap0 profile is listed as DOWN. (# ip link set dev tap0 up does nothing more) it's not down. it's UP, only NO-CARRIER. but for a tap device you also need a user-space program to handle it. what do you want to accomplish? do you perhaps need a veth device? -- damjan Actually, there was a state DOWN in the full command output, which is what matters. -- jlk pgpxsZbWv4JDx.pgp Description: PGP signature
Re: [arch-general] systemd-nspawn/systemd-networkd/
On 07.03.14 at 12:28, arnaud gaboury wrote: I've had a quick look at systemd-networkd, and I don't think it would be significantly different to set up than netctl in your case. I think the problem was one of theory: I don't know how much reading you've done, but you need to understand some theory of the networking stack, network interfaces, bridges etc... before you can make a sensible configuration. I think that's beyond the scope of the documentation for most of these tools, although it would certainly make sense for the wiki to document some common use-cases. Paul I read a lot, especially when it comes to networking. As for me, it is the trickiest part of administrating my machine. I found many posts asking help about bridge, and I realized I was far from being the only one to have trouble with this notion. The more detailed WIKI I found about a correct bridge set up was on parabolagnulinux qemu wiki[1]. Usually Arch and parabola wiki are quite similar, but this time I found more info. I know systemd-networkd can be used for my container. For now, I am enjoying the container with netctl. I was not successful with networkd, as I do not fully understand the principle. I don't even know which profile for wich machine (host or container) ! I have a lot of work to do now on container, as it will be a test server for writing/deploying web apps. TY for your kindness and support. [1]https://wiki.parabolagnulinux.org/QEMU_Guide I can't see any fundamental difference between [2] and [3], though admittedly the Parabola wiki is more verbose and the topic is integrated into single bloated article, whereas Arch wiki has the information split across multiple pages - this is actually considered to be a good thing; plus every Archer should be used to this. (But of course nothing is perfect, any improvements are certainly welcome.) As has been said, you should look into networking more generally - for example, QEMU page on Arch wiki [4] describes several scenarios usable with VMs/containers, though you probably don't want to use the QEMU-specific stuff. If you want something more, look into the kernel docs [5]. [2]: https://wiki.parabolagnulinux.org/QEMU_Guide#Using_virtual_machines_for_use_servers_from_OS_guests_.28bridge-mode_networking_using_qemu-bridge-helper.29 [3]: https://wiki.archlinux.org/index.php/Bridge_with_netctl [4]: https://wiki.archlinux.org/index.php/QEMU#Networking [5]: http://www.linuxfoundation.org/collaborate/workgroups/networking/bridge -- jlk pgpgIwYFYrhdG.pgp Description: PGP signature
Re: [arch-general] Xorg doesn't start
On 01.03.14 at 10:35, arno wrote: Hi, I am install archlinux on my laptop, and I can't get my graphical card to work (Xorg doesn't start). My card is an ati hd 6750 I've installed xf86-video-ati, xorg-xserver and xorg-xinit. But when I try to run startx, xorg doesn't start, and I get a fatal error: no screens found. Here is the full Xorg log: http://renevier.net/tmp/Xorg.0.log.txt I tried to use catalyst as described on the wiki, but when trying to run aticonfig, I get the following error: no supported adapters detected lspci -v gives me: 01:00.0 VGA compatible controller: Advanced Micro Devices, Inc. [AMD/ATI] Whistler [Radeon HD 6630M/6650M/6750M/7670M/7690M] (rev ff) (prog-if ff) !!! Unknown header type 7f Kernel driver in use: radeon Kernel modules: radeon, fglrx I also need to mention that when I boot from the install cd, then mount my archlinux system and chroot into it, lspci -v gives me: 01:00.0 VGA compatible controller: Advanced Micro Devices, Inc. [AMD/ATI] Whistler [Radeon HD 6630M/6650M/6750M/7670M/7690M] (prog-if 00 [VGA controller]) Subsystem: Samsung Electronics Co Ltd Radeon HD 6750M Flags: bus master, fast devsel, latency 0, IRQ 51 Memory at a000 (64-bit, prefetchable) [size=256M] Memory at c070 (64-bit, non-prefetchable) [size=128K] I/O ports at 3000 [size=256] Expansion ROM at c072 [disabled] [size=128K] Capabilities: [50] Power Management version 3 Capabilities: [58] Express Legacy Endpoint, MSI 00 Capabilities: [a0] MSI: Enable+ Count=1/1 Maskable- 64bit+ Capabilities: [100] Vendor Specific Information: ID=0001 Rev=1 Len=010 ? Capabilities: [150] Advanced Error Reporting Kernel driver in use: radeon So this brings me to my first subquestion: why does lspci work fine when booting from the install/repair CD, but displays Unknown header type when booting from my installed system? And my main question is of course: what could I do to get my card working, and X starting? thanks a lot. ArchWiki says [1]: Catalyst does not support Xorg Server 1.15, check out #Xorg repositories and pick up xorg repository that you would like to use. According to the Xorg log, your version is 1.15. Try the open source driver xf86-video-ati instead of the proprietary Catalyst; see [2] for details. You will have to uninstall Catalyst first. [3] [1]: https://wiki.archlinux.org/index.php/AMD_Catalyst [2]: https://wiki.archlinux.org/index.php/ATI [3]: https://wiki.archlinux.org/index.php/AMD_Catalyst#Uninstallation -- jlk pgpn_gkAjuqpr.pgp Description: PGP signature
Re: [arch-general] Xorg doesn't start
On 01.03.14 at 11:17, arno wrote: Hi, thanks for your reply ArchWiki says [1]: Catalyst does not support Xorg Server 1.15, check out #Xorg repositories and pick up xorg repository that you would like to use. Apparently, the new catalyst (14.1) works fine with Xorg 1.15 But anyway: On Sat, Mar 01, 2014 at 08:11:07PM +0100, Jakub Klinkovský wrote: On 01.03.14 at 10:35, arno wrote: I've installed xf86-video-ati, xorg-xserver and xorg-xinit. But when I try to run startx, xorg doesn't start, and I get a fatal error: no screens found. Here is the full Xorg log: http://renevier.net/tmp/Xorg.0.log.txt I *tried* first to use the xf86-video-ati, and it didn't work. I only tried afterwards to use catalyst. Neither catalyst nor xf86-video-ati work. I've also noticed in the log that you also have an Intel card. Linux 3.12 introduced some changes to automatic GPU switching and power management [1], maybe this is the problem. Which kernel do you have installed and which kernel is on the live system where 'lspci' works? [1]: http://kernelnewbies.org/LinuxChanges#head-f95c198f6fdc7defe36f470dc8369cf0e16898df -- jlk pgpQdM_BcvsfU.pgp Description: PGP signature
Re: [arch-general] Bridge interface with netctl
On 25.02.14 at 16:33, arnaud gaboury wrote: On Tue, Feb 25, 2014 at 1:43 PM, arnaud gaboury arnaud.gabo...@gmail.com wrote: Now, I want to start the bridge: # netctl start bridge-hortensia % ping -c 3 8.8.8.8 connect: Network is unreachable I realized that starting the bridge profile empty the /etc/resolv.conf. Even if I modified the bridge profile, following the man page: Description=Example Bridge connection Interface=br0 Connection=bridge BindsToInterfaces=(enp7s0) IP=no #Adress=('192.168.1.94/24') #Gateway='192.168.1.254' #DNS=('212.147.10.180' '212.147.10.162') DNSDomain=lan DNSSearch=('192.168.1.254') these two last lines are supposed to pass these settings to /etc/resolv.conf but nada :-( DNS is just a cherry on the cake, first you need to establish the network connection. I'm not using netctl for some time, but I'm pretty sure it does not launch any DHCP server. If you want to use DHCP, you will need to start the server on your own. I have written several scripts [1-4] to manage a bridge interface for QEMU VMs, see if you can reuse some of it. Especially [2] might be useful for you, though you probably do not need to create the tap interface. Note that the original author of [3] and [4] is Xyne, see his excellent tutorial [5]. [1]: https://github.com/lahwaacz/archlinux-dotfiles/blob/master/Scripts/qemu-launcher.sh [2]: https://github.com/lahwaacz/archlinux-dotfiles/blob/master/Scripts/qemu-tap-helper.sh [3]: https://github.com/lahwaacz/archlinux-dotfiles/blob/master/Scripts/nat-launch.sh [4]: https://github.com/lahwaacz/archlinux-dotfiles/blob/master/Scripts/nat-launch-subnet.sh [5]: http://xyne.archlinux.ca/notes/network/dhcp_with_dns.html Regards, -- jlk pgpIS8XafY9NL.pgp Description: PGP signature
Re: [arch-general] Vim configuration: custom runtimepath + ftdetect
On 14.02.14 at 14:36, Emil Lundberg wrote: On Fri, Feb 14, 2014 at 3:21 AM, Jakub Klinkovský j@gmx.com wrote: I have moved ~/.vim to ~/.config/vim, the configuration is as follows: in ~/.profile: export VIMINIT='let $MYVIMRC=$XDG_CONFIG_HOME/vim/vimrc | source $MYVIMRC' in ~/.config/vim/vimrc: set viminfo+=n$XDG_CACHE_HOME/vim/viminfo set runtimepath=$XDG_CONFIG_HOME/vim,$XDG_CONFIG_HOME/vim/after,$VIM,$VIMRUNTIME Now, the thing is that files from ~/.config/vim/ftdetect/ are not respected. On the other hand, if I create ~/.vim/ftdetect/ (leaving the vimrc and everything else under ~/.config), the files are correctly sourced. Is this a bug or am I missing something here? According to ':help ftdetect' the runtimepath should be respected. For completeness: I have vim-hg-7.4.179 installed, the PKGBUILD is here: https://github.com/lahwaacz/archlinux-dotfiles/blob/master/Build/vim-hg/PKGBUILD Thanks, -- jlk I moved my vim config in exactly the same way a few days ago, but I use symlinks instead of configuration options. $ ln -s ~/.config/vim/vimrc ~/.vimrc $ ln -s ~/.config/vim ~/.vim Works just fine for me. /Emil Sure the symlinks work - but that will not help on the quest of cleaning my $HOME folder and totally kills the reason for moving into ~/.config/ -- jlk pgp38KmghwVTo.pgp Description: PGP signature
[arch-general] Vim configuration: custom runtimepath + ftdetect
I have moved ~/.vim to ~/.config/vim, the configuration is as follows: in ~/.profile: export VIMINIT='let $MYVIMRC=$XDG_CONFIG_HOME/vim/vimrc | source $MYVIMRC' in ~/.config/vim/vimrc: set viminfo+=n$XDG_CACHE_HOME/vim/viminfo set runtimepath=$XDG_CONFIG_HOME/vim,$XDG_CONFIG_HOME/vim/after,$VIM,$VIMRUNTIME Now, the thing is that files from ~/.config/vim/ftdetect/ are not respected. On the other hand, if I create ~/.vim/ftdetect/ (leaving the vimrc and everything else under ~/.config), the files are correctly sourced. Is this a bug or am I missing something here? According to ':help ftdetect' the runtimepath should be respected. For completeness: I have vim-hg-7.4.179 installed, the PKGBUILD is here: https://github.com/lahwaacz/archlinux-dotfiles/blob/master/Build/vim-hg/PKGBUILD Thanks, -- jlk pgpB6WsIMu2N3.pgp Description: PGP signature
Re: [arch-general] ArchWiki: bad rendering on Android devices
On 06.12.13 at 16:53, Lukas Jirkovsky wrote: On Fri, Dec 6, 2013 at 4:39 PM, Jakub Klinkovský j@gmx.com wrote: Hi, I've noticed some pretty bad rendering of ArchWiki on my Nexus 7 - see the screenshots in [1]. The indentation is fine on Firefox for Android, but it has a different problem – the menu uses too large font, so almost every menu entry spans over several lines. Lukas Even on wikipedia.org the text is indented from right side (when requested the desktop version). This is pretty annoying because most wikis don't have a mobile version. Plus on tablets the mobile version does not make sense anyway. This sounds like an issue with webkit then, so it boils down to whether it's easier to fix webkit or provide a workaround for MediaWiki... -- Jakub Klinkovský (Lahwaacz) pgpdLUiCACgVy.pgp Description: PGP signature
Re: [arch-general] Fwd: Notebook freeze and slow when copy big files to external usb
On 04.12.13 at 12:08, Maykel Franco wrote: Hi, I when I make a copy of a large file to a 2GB or 8GB usb 3.0 external hard drive, I notice that arch remains slow, frozen ... He struggles to open windows are minimized. I have the kernel: 3.12.2-1-ARCH Update the whole system to the last. Can you think because it can be? I also went from the 3.11 kernel However, debian, ubuntu, opensuse me not pass this ... It's happened to someone else? Thanks for everything. See ArchWiki: https://wiki.archlinux.org/index.php/Maximizing_Performance#Tuning_kernel_parameters Even USB 3 is slow compared to RAM... See also this article on LWN for more information: http://lwn.net/Articles/572911/ pgpYH19MmmQU2.pgp Description: PGP signature
Re: [arch-general] dpms in text mode worked 1st boot, now monitor blanks but won't power off
On 03.12.13 at 8:18, David C. Rankin wrote: Guys, On my 1st boot after install of a new Arch box, the monitor would go to sleep in text mode. (monitor power light goes to yellow indicating sleep and screen goes black (off), not just blank) I thought that was a great trick, since normally, the screen just blanks, but the monitor doesn't really go to sleep (monitor power indicator on). Mouse movement (gpm) or key stroke would wake the monitor up as expected. After configuring the box (nothing related to display) on the next boot, the screen will blank, but not go to sleep (monitor power light remains on and screen goes blank, but not black (off)) I can't figure out what I could have done to alter anything related to the display. (configuration was to mysql, httpd, named, dhcpd, samba, etc) What controls whether display powers off in text mode and what can I check for in journalctl to help figure this out? -- David C. Rankin, J.D.,P.E. I use 'consoleblank=seconds' kernel parameter to set the delay. See also ArchWiki page: https://wiki.archlinux.org/index.php/Display_Power_Management_Signaling#DPMS_interaction_in_a_Linux_console_with_setterm --- Jakub Klinkovský (Lahwaacz) pgpHG3khvwKAs.pgp Description: PGP signature
Re: [arch-general] mplayer2 deprecation
On 31.10.13 at 4:55, coffeekin...@gmail.com wrote: On Thu, Oct 31, 2013 at 05:03:53PM +0800, Rashif Ray Rahman wrote: On 31 October 2013 06:38, kendell clark coffeekin...@gmail.com wrote: Since mplayer2 has been deprecated and moved to the aur, i've been trying to find another console video player that will play videos in full screen. Fullscreen in console requires a trick, AFAIK. In fact, the 'fs' option has no major function; 'zoom' does the work, though I may be wrong. Append the following options: -vo fbdev2 == Standard fbdev may not work. -zoom -xy WIDTH == Here WIDTH is your maximum horizontal screen resolution. -quiet == To suppress the info bar at bottom while maximized. -fs == To suppress background output while maximized. Here's what I use for my 1366x768 screen: alias climplayerfs='mplayer -quiet -softvol -fs -zoom -xy 1366 -vo fbdev2 -ao alsa -af volnorm' -- GPG/PGP ID: C0711BF1 hi Thanks for the help. That worked better than my attempts did, although now when I start mplayer with the alias I get the following: [fbdev2] Screensize is smaller than video size (1600x900 1600x1200) FATAL: Cannot initialize video driver. I used to run into these issues all the time. Am I missing anything, or is it just not possible to watch videos in console with mplayer? Thanks Kendell clark I have this little script which tries to preserve the aspect ratio, maybe it will work better for you: https://github.com/lahwaacz/archlinux-dotfiles/blob/master/Scripts/mplayer-console pgpvb_MifhY5X.pgp Description: PGP signature
Re: [arch-general] xdm and awesomewm incompatibilty
On 28.09.13 at 20:12, Szymon Szydełko wrote: On Sat, Sep 28, 2013 at 6:40 PM, ashwin ashwin@gmail.com wrote: What i am looking for is just the login manager and its dependecies and not the entire DE. I assume kdm does the same thing. If you can cope with GTK+3 being pulled, try LightDM https://wiki.archlinux.org/index.php/Lightdm Szymon Szydełko You don't need gtk3 to use lightdm, it depends on the greeter: https://www.archlinux.org/packages/community/x86_64/lightdm-gtk2-greeter/ pgpshx1ZU590B.pgp Description: PGP signature
Re: [arch-general] arch install issues with 2013.09 iso vfat device
On 17.09.13 at 0:06, arnaud gaboury wrote: Dear all, this is my second arch install this month (archlinux-2013.09.01-dual.iso) on an usb key to get a live Arch. Both installs failed on a vfat formated device, when they succed on ext2. $ pacstrap /mnt base returns lot of these erros: warning: warning given when extracting usr/bin/vgrename (Can't create '/mnt/usr/bin/vgrename') .. It seems, even in chroot, that I can't write the vfat formated device I would like to use vfat as these keys are aimed to boot Arch from windows machines and share files. I used gdisk and fdisk to partition, then mkfs.vfat to format, on clean usb keys. Is there anything I missed ? Then, there is an issue with package vi: error: could not open file /mnt/var/cache/pacman/pkg/vi-1:050325-3-x86_64.pkg.tar.xz.part: Invalid argument I first # pacman-key --init pacman-key --populate archlinux and # pacman -Syy The only way to succed the install was : # pacstrap -i /mnt base --ignore vi I must add that earlier installs with earlier iso did not show this issue. Maybe shall I open a bug report, or is this a known issue ? Last, the above command returns : :: vi is in IgnorePkg/IgnoreGroup. Install anyway? [Y/n] It seems weird to me that default is Yes, as I specified --ignore vi. Would' nt it makes more sense to default No ? Regards. vfat has a lot of reserved characters: https://en.wikipedia.org/wiki/Filename#Comparison_of_filename_limitations Note the colon (':') in vi-1:050325-3-x86_64.pkg.tar.xz.part, don't know why it couldn't write /mnt/usr/bin/vgrename. Regards, Jakub Klinkovský (Lahwaacz) pgpcgZvTj7b7k.pgp Description: PGP signature
[arch-general] Various questions regarding keyboard configuration
Hi, I'm currently rewriting some pages on ArchWiki regarding keyboard configuration, the current state is quite a mess. Here's the most relevant discussion: https://wiki.archlinux.org/index.php/Talk:Xorg#Keyboard_settings You can watch the progress on my user-pages, any feedback is welcome: https://wiki.archlinux.org/index.php/User:Lahwaacz/Keyboard_configuration_in_Xorg https://wiki.archlinux.org/index.php/User:Lahwaacz/Keyboard_configuration_in_console I've got some questions that I think should be answered before I finish: 1) Why are keycodes as reported by xev different from those reported by showkey? This is not related to configuration, but I plan to update/rewrite https://wiki.archlinux.org/index.php/Extra_Keyboard_Keys too. 2) The man page vconsole.conf(5) mentions KEYMAP_TOGGLE variable to configure a second toggle keymap, however, that's all the documentation says. Looking at the code (vconsole-setup.c at line 120), it uses the 'loadkeys' utility, which does not document any such feature. Instead it seems that the specified keymaps are loaded serially, resulting in KEYMAP_TOGGLE overwrites KEYMAP. Am I missing something here? Regards, Jakub Klinkovský (Lahwaacz) pgplXKPeSFgLK.pgp Description: PGP signature
Re: [arch-general] iptables script
On 10.09.13 at 13:27, F. Gr. wrote: I'm newbie about iptables. I use this script http://pastebin.ca/2447430 for my system. It is based on http://wiki.archlinux.org/index.php/Simple_stateful_firewall. Now I want to add an iptables log chain and others. What is the correct line to start adding the following? script ## Logging $IPT -N LOGDROP $IPT -A LOGDROP -m limit --limit 5/m --limit-burst 8 -j LOG --log-prefix IPTables-Dropped: $IPT -A LOGDROP -j DROP The position of these lines in script does not matter much, place it anywhere below line 27. # log and drop packets that hit this rule $IPT -A INPUT -m conntrack --ctstate INVALID -j LOGDROP This should replace '$IPT -A INPUT -m conntrack --ctstate INVALID -j DROP' (line 47 in the script) /script Supposing I want to add the following lines as well, is there any rules that is superfluous? These rules have to place after or before the rule $IPT -A INPUT -m conntrack --ctstate INVALID -j DROP? script # SSH bruteforce attacks $IPT -N IN_SSH For consistency, place it below the definition on other chains, line 32. $IPT -A INPUT -p tcp --dport ssh -m conntrack --ctstate NEW -j IN_SSH The ssh connections should be handled before it falls into TCP chain, so place this rule before '$IPT -A INPUT -p tcp --syn -m conntrack --ctstate NEW -j TCP' (line 50). $IPT -A IN_SSH -m recent --name sshbf --rttl --rcheck --hitcount 3 --seconds 10 -j DROP $IPT -A IN_SSH -m recent --name sshbf --rttl --rcheck --hitcount 4 --seconds 1800 -j DROP $IPT -A IN_SSH -m recent --name sshbf --set -j ACCEPT Same as the LOGDROP chain (see above), anywhere below line 27. $IPT -A INPUT -p tcp --dport ssh -m conntrack --ctstate NEW -j IN_SSH You don't have to duplicate the rules. ## Local Area Network Denial (LAND) attack # Block all packets from your own IP $IPT -A INPUT -s 192.168.201.2/32 -j DROP # Block any packet from local network $IPT -A INPUT -s 127.0.0.0/8 -j DROP # SYN Flood $IPT -A FORWARD -p tcp --syn -m limit --limit 1/s -j ACCEPT # SYN packets # Drop any tcp packet that does not start a connection with a syn flag $IPT -A INPUT -p tcp ! --syn -m conntrack --ctstate NEW -j DROP # NULL packets $IPT -A INPUT -p tcp --tcp-flags ALL NONE -j DROP # XMAS packets $IPT -A INPUT -p tcp --tcp-flags ALL ALL -j DROP # Fragments Packet $IPT -A INPUT -f -j DROP # ping of death $IPT -A FORWARD -p icmp --icmp-type echo-request -m limit --limit 1/s -j ACCEPT # Furtive port scanner $IPT -A FORWARD -p tcp --tcp-flags SYN,ACK,FIN,RST RST -m limit --limit 1/s -j ACCEPT /script I'm not sure about the rest, I think it should go before any rule in INPUT chain with target ACCEPT (in the script that is '$IPT -A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT' on line 43, icmp echo-request (line 41) does not count - it is already handled). The Simple Stateful Firewall article on ArchWiki states that Dropping all traffic and specifying what is allowed is the best way to make a secure firewall., so at least some of these rules might be superfluous. I don't know how you use the script, but you might consider using the 'iptables-restore' command to switch between multiple iptables configurations. If you still want to use the iptables.service, you can make the file /etc/iptables/iptables.rules a symlink and change its target to change the configuration. You can run 'iptables-save foo.rules' to save current iptables configuration, edit the file to your liking (adding comments etc.), and finally run 'iptables-restore foo.rules' to load the saved configuration. Regards, Jakub Klinkovský (Lahwaacz) pgpPO6_mnLKRo.pgp Description: PGP signature